This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier: QrZnBpTsvyevy6ttD4v6DRezatpUXr7D67DBwgH0v/k=
Subject key identifier: 1A:60:DB:5B:1B:30:BD:4C:55:AC:E6:0B:E0:DB:D9:86:CD:53:A0:AE
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial: 0ADD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number: 123B
Signing time: Sat 24 Jan 2026 18:54:02 +0000
Manifest this update: Sat 24 Jan 2026 18:54:01 +0000
Manifest next update: Sat 31 Jan 2026 18:54:01 +0000
Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: OSlU7BhdH2BIt9JwWJ3FDo6pmCBDRWax5x5O8Fg6jJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Validity
Not Before: Jan 24 18:54:01 2026 GMT
Not After : Jan 31 18:54:01 2026 GMT
Subject: CN=6975154a-0bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:17:b6:e2:3f:34:8b:87:58:db:9a:cc:6b:
0f:41:4f:b1:d7:4a:3f:f4:78:fc:3d:40:28:d3:09:
ee:e6:8d:de:57:20:bc:28:13:95:e8:22:01:32:3d:
30:f1:07:ac:96:96:1b:c1:72:49:23:9f:5b:e8:a5:
2a:e6:87:45:33:20:b3:18:5f:12:76:d8:d8:38:cf:
ce:1c:71:2b:c0:89:82:4e:bf:74:3c:0d:d2:e1:14:
41:70:14:5a:ec:1c:0d:ec:de:70:ee:3a:0d:f5:61:
a0:12:72:f3:03:6b:17:db:5a:b2:75:5f:3d:85:45:
ec:07:64:70:a7:4b:7b:0a:4a:94:db:e6:0e:0b:f2:
1a:39:e1:e3:99:9a:d3:45:a0:1c:65:ec:0e:d1:2e:
96:7f:0d:ab:90:95:8e:3a:b2:ff:f1:0a:0c:c3:17:
c8:66:05:90:e5:99:95:22:b2:07:9a:b2:05:07:09:
8c:0f:b2:18:75:fb:ec:4b:29:df:80:9b:b6:86:44:
20:bc:c2:7c:ec:f4:f0:0e:31:e6:ae:57:75:06:31:
c9:d6:73:82:55:b6:a1:27:62:5d:28:7b:2d:96:50:
93:7e:24:b6:85:e5:a8:21:f4:b1:33:37:41:57:a4:
19:45:ff:a2:f2:b2:1d:f3:1f:5b:a8:84:a6:af:c0:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:DB:5B:1B:30:BD:4C:55:AC:E6:0B:E0:DB:D9:86:CD:53:A0:AE
X509v3 Authority Key Identifier:
keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:1b:6a:22:d6:e1:5b:03:6c:b2:34:92:ed:ae:69:67:09:
1e:16:3a:23:46:89:9e:d3:9d:b1:d7:7d:23:f8:01:b7:9e:d0:
b6:59:3f:ac:d3:ed:dc:1d:d5:6d:b2:a2:89:99:d5:78:c5:9b:
53:a3:73:95:97:65:ea:7e:e4:54:b0:ea:83:df:5e:ed:08:8e:
96:dd:05:b0:b1:7e:52:0e:63:34:28:8a:a5:c2:68:da:be:33:
b5:2f:02:f6:87:c8:65:e6:35:c9:0f:32:8a:60:17:bd:a5:f3:
b0:c0:09:e2:24:44:3f:07:b8:50:8c:00:80:3d:1e:6e:36:43:
92:6d:0a:c9:44:22:62:86:d9:dc:72:d7:50:9f:78:a4:35:6d:
63:8f:6f:28:5b:97:77:32:55:b6:73:b8:6f:5d:b0:fd:e7:bc:
de:42:c1:06:7e:d0:2f:75:80:7d:ca:20:b5:ef:77:02:f2:32:
77:31:5e:a6:0c:a6:4c:fe:34:27:d3:49:eb:25:18:58:41:5d:
9c:7c:3d:ec:e1:00:16:c2:6a:74:cf:89:6b:30:58:48:67:e6:
f7:0c:61:be:4a:1c:51:ee:49:5c:8b:e8:f3:88:c1:17:bb:5c:
80:e6:93:b4:a9:74:a5:9b:6e:f3:f2:08:58:83:4f:f3:79:ed:
cb:98:d3:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz
RTRDRjM2NDQwHhcNMjYwMTI0MTg1NDAxWhcNMjYwMTMxMTg1NDAxWjAYMRYwFAYD
VQQDDA02OTc1MTU0YS0wYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArn8XtuI/NIuHWNuazGsPQU+x10o/9Hj8PUAo0wnu5o3eVyC8KBOV6CIBMj0w
8QeslpYbwXJJI59b6KUq5odFMyCzGF8SdtjYOM/OHHErwImCTr90PA3S4RRBcBRa
7BwN7N5w7joN9WGgEnLzA2sX21qydV89hUXsB2Rwp0t7CkqU2+YOC/IaOeHjmZrT
RaAcZewO0S6Wfw2rkJWOOrL/8QoMwxfIZgWQ5ZmVIrIHmrIFBwmMD7IYdfvsSynf
gJu2hkQgvMJ87PTwDjHmrld1BjHJ1nOCVbahJ2JdKHstllCTfiS2heWoIfSxMzdB
V6QZRf+i8rId8x9bqISmr8BWHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpg21sb
ML1MVazmC+Db2YbNU6CuMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx
RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ
TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB26htqItbhWwNssjSS7a5pZwkeFjojRome052x130j+AG3ntC2WT+s
0+3cHdVtsqKJmdV4xZtTo3OVl2XqfuRUsOqD317tCI6W3QWwsX5SDmM0KIqlwmja
vjO1LwL2h8hl5jXJDzKKYBe9pfOwwAniJEQ/B7hQjACAPR5uNkOSbQrJRCJihtnc
ctdQn3ikNW1jj28oW5d3MlW2c7hvXbD957zeQsEGftAvdYB9yiC173cC8jJ3MV6m
DKZM/jQn00nrJRhYQV2cfD3s4QAWwmp0z4lrMFhIZ+b3DGG+ShxR7klci+jziMEX
u1yA5pO0qXSlm27z8ghYg0/zee3LmNN3
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:31:56 2026 by rpki-client